Пример #1
0
function cevapSahibi($cevapID)
{
    global $yol1;
    $usernam = substr(temizle($usernam), 0, 15);
    $sql1 = "SELECT userID FROM eo_askanswer \r\n\t\t\twhere id='" . temizle($cevapID) . "'  limit 0,1";
    $result1 = mysql_query($sql1, $yol1);
    if ($result1 && mysql_numrows($result1) == 1) {
        return mysql_result($result1, 0, "userID");
    } else {
        return "";
    }
}
Пример #2
0
function getKonuKayitliKullanici($gelenID)
{
    global $yol1;
    $sql1 = "select sadeceKayitlilarGorebilir from eo_4konu where id ='" . temizle($gelenID) . "'";
    $result1 = mysql_query($sql1, $yol1);
    if ($result1 and mysql_num_rows($result1) == 1) {
        mysql_fetch_row($result1);
        return mysql_result($result1, 0, "sadeceKayitlilarGorebilir");
    } else {
        return "1";
    }
}
Пример #3
0
function getUserIDcomment($usernam, $passwor)
{
    global $yol1;
    $usernam = substr(temizle($usernam), 0, 15);
    $sql1 = "SELECT id, userName, userPassword FROM eo_users where userName='******' AND userPassword='******' limit 0,1";
    $result1 = mysql_query($sql1, $yol1);
    if ($result1 && mysql_numrows($result1) == 1) {
        return mysql_result($result1, 0, "id");
    } else {
        return "";
    }
}
Пример #4
0
// For security and spam protection reasons check if $_POST['token'] has the same value as $_SESSION['token']
if (isset($_POST['name']) && trim($_POST['name'] !== "") && trim($_POST['name'] !== "name") && strlen($_POST['name']) < 26 && (isset($_POST['url']) && strlen($_POST['url']) < 100) && (isset($_POST['message']) && trim($_POST['message']) !== "" && trim($_POST['message']) !== "message" && strlen($_POST['message']) < 400) && (isset($_SESSION['token']) && $_POST['token'] == $_SESSION['token'])) {
    $name = $_POST['name'];
    $url = trim($_POST['url']);
    if (strstr($url, 'http://') && strlen($url) == 7 || $url == "") {
        unset($url);
    }
    $msg = $_POST['message'];
    // Get a sender IP (it will be in use in the next wTag version)
    $remote = $_SERVER["REMOTE_ADDR"];
    // Store it converted
    $converted_address = ip2long($remote);
    $oda = $_SESSION["oda"];
    $name = iconv("UTF-8", "ISO-8859-9", temizle($name));
    $url = iconv("UTF-8", "ISO-8859-9", temizle($url));
    $msg = iconv("UTF-8", "ISO-8859-9", temizle($msg));
    // Insert a new message into database
    if ($msg != "") {
        $sql->query("INSERT INTO eo_shoutbox SET name= '{$name}', url='{$url}', message= '{$msg}', ip='{$oda}', date=now()");
    }
    // Get the id for the last inserted message
    $lastid = $sql->get_id();
    // Delete oldest messages
    if ($lastid > 300) {
        $sql->query("DELETE FROM eo_shoutbox WHERE messageid <({$lastid}-20)");
    }
    // Retrieve last 20 messages
    $sql->query("SELECT date, name, url, message FROM eo_shoutbox WHERE messageid <= {$lastid} and ip='{$oda}' ORDER BY messageid DESC LIMIT 20");
} else {
    // Just retrieve last 20 messages
    $sql->query("SELECT date, name, url, message FROM eo_shoutbox where ip='{$oda}' ORDER BY messageid DESC LIMIT 20");
Пример #5
0
eOgr - elearning project

Developer Site: http://yunus.sourceforge.net
Demo Site:		http://yunus.sourceforge.net/eogr
Source Track:	http://eogr.googlecode.com 
Support:		http://www.ohloh.net/p/eogr

This project is free software; you can redistribute it and/or
modify it under the terms of the GNU Lesser General Public
License as published by the Free Software Foundation; either
version 3 of the License, or any later version. See the GNU
Lesser General Public License for more details.
*/
header("Content-Type: text/html; charset=iso-8859-9");
ob_start();
// Buffer output
session_start();
$_SESSION['ready'] = TRUE;
require "conf.php";
if (!check_source()) {
    die("<font id='hata'>{$metin['295']}</font>");
}
if (md5($_SERVER['HTTP_USER_AGENT']) == $_SESSION['aThing']) {
    $adi = temizle(substr(isset($_SESSION["usern"]) ? $_SESSION["usern"] : "", 0, 15));
    $par = temizle(isset($_SESSION["userp"]) ? $_SESSION["userp"] : "");
    if (temizle($_GET["sonSayfa"]) > 0) {
        echo trackUserLesson(getUserID($adi, $par), temizle($_GET["konuID"]), temizle($_GET["sure"]), temizle($_GET["sonSayfa"]));
    }
} else {
    sessionDestroy();
}
Пример #6
0
                    <input type="text" maxlength="50" size="50" name="ara" value="<?php 
    echo RemoveXSS(isset($_GET["ara"]) ? $_GET["ara"] : "");
    ?>
"  />
                    <input name="arama" type="image" id="ara" src="img/view.png" alt="Ara"  style="vertical-align: middle;"/>
                  </form>
                  </p>
                  <?php 
    $currentPage = $_SERVER["PHP_SELF"];
    $devam = RemoveXSS(isset($_GET["devam"]) ? $_GET["devam"] : "");
    if (empty($_SESSION['soruLimit'])) {
        $_SESSION['soruLimit'] = 5;
    }
    $limit = RemoveXSS($_SESSION['soruLimit']);
    $arama = str_replace("'", "`", isset($_GET["ara"]) ? $_GET["ara"] : "");
    $arama = substr(temizle($arama), 0, 300);
    $tumKaySay = soruSayisiGetir($arama);
    if ($devam == "1" and $tumKaySay > $_SESSION['soruLimit']) {
        $_SESSION['soruLimit'] += 3;
        $limit = RemoveXSS($_SESSION['soruLimit']);
    }
    if ($arama != "") {
        $veriSQL = "SELECT * FROM eo_askquestion WHERE question \r\n\t\t\t\t\t\t\tLIKE '%{$arama}%'\r\n\t\t\t\t\t\t \tORDER BY eklenmeTarihi DESC LIMIT 0,{$limit}";
    } else {
        $veriSQL = "SELECT * FROM eo_askquestion ORDER BY eklenmeTarihi DESC LIMIT 0,{$limit}";
    }
    $veriSonuc = mysql_query($veriSQL, $yol1);
    $kaySay = @mysql_num_rows($veriSonuc);
    if ($kaySay > 0) {
        ?>
                  <p>
Пример #7
0
}
dilCevir($taraDili);
$aUsers = array();
$aID = array();
$aInfo = array();
$result = mysql_query("select realName from eo_users order by id");
for ($i = 0; $sonuc = mysql_fetch_assoc($result); $i++) {
    $aUsers[$i] = iconv("ISO-8859-9", "UTF-8", temizle(htmlentities($sonuc["realName"])));
}
$result = mysql_query("select id from eo_users order by id");
for ($i = 0; $sonuc = mysql_fetch_assoc($result); $i++) {
    $aID[$i] = iconv("ISO-8859-9", "UTF-8", temizle(htmlentities($sonuc["id"])));
}
$result = mysql_query("select userName from eo_users order by id");
for ($i = 0; $sonuc = mysql_fetch_assoc($result); $i++) {
    $aInfo[$i] = iconv("ISO-8859-9", "UTF-8", temizle(htmlentities($sonuc["userName"])));
}
if (!empty($_GET['input'])) {
    $input = strtolower($_GET['input']);
} else {
    $input = "";
}
$len = strlen($input);
$limit = 5;
$aResults = array();
$count = 0;
if ($len) {
    for ($i = 0; $i < count($aUsers); $i++) {
        // had to use utf_decode, here
        // not necessary if the results are coming from mysql
        //
Пример #8
0
             echo "<font id='tamam'> Site bakýma alýndý.</font>";
             trackUser($currentFile, "success,SiteLock", $adi);
         }
         if ($_POST['ayar5char17'] == "1") {
             if (@chmod($_uploadFolder, 0777)) {
                 echo "<font id='tamam'> Paylaþým klasörü yazýlabilir.</font>";
                 trackUser($currentFile, "success,SharedWrite", $adi);
             }
         } else {
             if (@chmod($_uploadFolder, 0755)) {
                 echo "<font id='tamam'> Paylaþým klasörü salt okunur.</font>";
                 trackUser($currentFile, "success,SharedReadOnly", $adi);
             }
         }
         $ayar5char = temizle($_POST['ayar5char1'] . "-" . $_POST['ayar5char2'] . "-" . $_POST['ayar5char3'] . "-" . $_POST['ayar5char4'] . "-" . $_POST['ayar5char5'] . "-" . $_POST['ayar5char6'] . "-" . $_POST['ayar5char7'] . "-" . $_POST['ayar5char8'] . "-" . $_POST['ayar5char9'] . "-" . $_POST['ayar5char10'] . "-" . $_POST['ayar5char11'] . "-" . $_POST['ayar5char12'] . "-" . $_POST['ayar5char13'] . "-" . $_POST['ayar5char14'] . "-" . $_POST['ayar5char15'] . "-" . $_POST['ayar5char16'] . "-" . $_POST['ayar5char17']);
         $updateSQL = sprintf("\r\n\t\t\tUPDATE eo_sitesettings \r\n\t\t\tSET okulGenelAdi=%s, versiyon=%s, sayfaBlokSayisi=%s, \r\n\t\t\tsayfaKullaniciSayisi=%s, veriHareketleriSayisi=%s, \r\n\t\t\tayar4char=%s, ayar1int=%s, ayar2int=%s, ayar3int=%s, \r\n\t\t\tayar5char='%s',\r\n\t\t\tuploadFolder = %s,\r\n\t\t\tsiteUnlockPwd = %s,\r\n\t\t\tdefaultTheme = %s,\r\n\t\t\tdefaultLang = %s,\r\n\t\t\tfilesToPlay = %s,\r\n\t\t\tfileMaxUploadSize = %s,\r\n\t\t\tvideoChatSession = %s,\r\n\t\t\twhiteBoardSession = %s\r\n\t\t\t\r\n\t\t\tWHERE id='1'", temizle(GetSQLValueString($_POST['okulGenelAdi'], "text")), temizle(GetSQLValueString($_POST['versiyon'], "text")), temizle(GetSQLValueString($_POST['sayfaBlokSayisi'], "int")), temizle(GetSQLValueString($_POST['sayfaKullaniciSayisi'], "int")), temizle(GetSQLValueString($_POST['veriHareketleriSayisi'], "int")), temizle(GetSQLValueString($_POST['ayar4char'], "text")), temizle(GetSQLValueString($_POST['ayar1int'], "int")), temizle(GetSQLValueString($_POST['ayar2int'], "int")), temizle(GetSQLValueString($_POST['ayar3int'], "int")), $ayar5char, temizle(GetSQLValueString($_POST['uploadFolder'], "text")), temizle(GetSQLValueString($_POST['siteUnlockPwd'], "text")), temizle(GetSQLValueString($_POST['defaultTheme'], "text")), temizle(GetSQLValueString($_POST['defaultLang'], "text")), temizle(GetSQLValueString($_POST['filesToPlay'], "text")), temizle(GetSQLValueString($_POST['fileMaxUploadSize'], "int")), temizle(GetSQLValueString($_POST['videoChatSession'], "text")), temizle(GetSQLValueString($_POST['whiteBoardSession'], "text")));
         mysql_select_db($_db, $yol);
         $Result1 = mysql_query($updateSQL, $yol);
         if ($Result1) {
             trackUser($currentFile, "success,SiteInfo", $adi);
             echo "<font id='uyari'> {$metin['536']}</font>";
         } else {
             trackUser($currentFile, "fail,SiteInfo", $adi);
             echo "<font id='hata'> Site bilgilerinde hata olduðunda g&uuml;ncelleme iþleminiz tamamlanamadý!</font>";
         }
     }
 }
 ?>
                       <br />
                       <br />
                       <?php 
Пример #9
0
@session_start();
include "conf.php";
$aUsers = array();
$aID = array();
$aInfo = array();
$result = mysql_query("select konuAdi from eo_4konu order by id");
for ($i = 0; $sonuc = mysql_fetch_assoc($result); $i++) {
    $aUsers[$i] = iconv("ISO-8859-9", "UTF-8", temizle(htmlentities($sonuc["konuAdi"])));
}
$result = mysql_query("select id from eo_4konu order by id");
for ($i = 0; $sonuc = mysql_fetch_assoc($result); $i++) {
    $aID[$i] = iconv("ISO-8859-9", "UTF-8", temizle(htmlentities($sonuc["id"])));
}
$result = mysql_query("select eo_3ders.dersAdi as dersAdi from eo_3ders,eo_4konu where eo_4konu.dersID=eo_3ders.id order by eo_4konu.id");
for ($i = 0; $sonuc = mysql_fetch_assoc($result); $i++) {
    $aInfo[$i] = iconv("ISO-8859-9", "UTF-8", temizle(htmlentities($sonuc["dersAdi"])));
}
if (!empty($_GET['input'])) {
    $input = strtolower($_GET['input']);
} else {
    $input = "";
}
$len = strlen($input);
$limit = 5;
$aResults = array();
$count = 0;
if ($len) {
    for ($i = 0; $i < count($aUsers); $i++) {
        // had to use utf_decode, here
        // not necessary if the results are coming from mysql
        //
Пример #10
0
            break;
        default:
            $ktut = $metin[89];
    }
    $geceliKullID = getUserID2($adi);
    if (isset($_GET["kisi"])) {
        if (!empty($_GET["kisi"])) {
            $_SESSION["seciliArkadas"] = RemoveXSS($_GET["kisi"]);
        }
    }
    ?>
                  <p> <?php 
    echo $metin[7];
    ?>
, <?php 
    echo temizle($_SESSION["userr"]) . "&nbsp;<a href='profil.php?kim=" . $geceliKullID . "&amp;set=1' rel=\"facebox\">{$metin['311']}</a> " . $ktut;
    ?>
 </p>
                  <?php 
    if ($_SESSION["tur"] == '0') {
        $siniflar = getOgrenciSiniflari();
        if ($siniflar != "") {
            echo "<p>" . $metin[210] . " : " . $siniflar;
            echo "</p>";
        }
    }
    if ($_SESSION["tur"] == '1' || $_SESSION["tur"] == '2') {
        $pasifYorumlar = getpasifYorumlar();
        if ($pasifYorumlar > 0) {
            echo "<p>" . $metin[294] . " : <a href=dataCommentList2.php>" . $pasifYorumlar . " <img src='img/uyari.gif' border='0' style=\"vertical-align: middle;\" alt=\"imp\" /></a>";
            echo "</p>";
Пример #11
0
function boardnewslide($start = null, $length = null, $output_method = 'echo')
{
    global $txt, $scripturl, $user_info, $context, $modSettings, $sourcedir, $board, $smcFunc, $settings;
    if (isset($_REQUEST['start']) && $_REQUEST['start'] > 95) {
        $_REQUEST['start'] = 95;
    }
    $query_parameters = array();
    if (!empty($_REQUEST['c']) && empty($board)) {
        $_REQUEST['c'] = explode(',', $_REQUEST['c']);
        foreach ($_REQUEST['c'] as $i => $c) {
            $_REQUEST['c'][$i] = (int) $c;
        }
        if (count($_REQUEST['c']) == 1) {
            $request = $smcFunc['db_query']('', '
				SELECT name
				FROM {db_prefix}categories
				WHERE id_cat = {int:id_cat}
				LIMIT 1', array('id_cat' => $_REQUEST['c'][0]));
            list($name) = $smcFunc['db_fetch_row']($request);
            $smcFunc['db_free_result']($request);
            if (empty($name)) {
                fatal_lang_error('no_access', false);
            }
            $context['linktree'][] = array('url' => $scripturl . '#c' . (int) $_REQUEST['c'], 'name' => $name);
        }
        $request = $smcFunc['db_query']('', '
			SELECT b.id_board, b.num_topics
			FROM {db_prefix}boards AS b
			WHERE b.id_cat IN ({array_int:category_list})
				AND {query_see_board}', array('category_list' => $_REQUEST['c']));
        $total_cat_posts = 0;
        $boards = array();
        while ($row = $smcFunc['db_fetch_assoc']($request)) {
            $boards[] = $row['id_board'];
            $total_cat_posts += $row['num_posts'];
        }
        $smcFunc['db_free_result']($request);
        if (empty($boards)) {
            fatal_lang_error('error_no_boards_selected');
        }
        $query_this_board = 'b.id_board IN ({array_int:boards})';
        $query_parameters['boards'] = $boards;
        // If this category has a significant number of posts in it...
        if ($total_cat_posts > 100 && $total_cat_posts > $modSettings['totalMessages'] / 15) {
            $query_this_board .= '
					AND m.id_msg >= {int:max_id_msg}';
            $query_parameters['max_id_msg'] = max(0, $modSettings['maxMsgID'] - 400 - $_REQUEST['start'] * 7);
        }
        $context['page_index'] = constructPageIndex($scripturl . '?' . implode(',', $_REQUEST['c']), $_REQUEST['start'], min(100, $total_cat_posts), 5, false);
    } elseif (!empty($_REQUEST['boards'])) {
        $_REQUEST['boards'] = explode(',', $_REQUEST['boards']);
        foreach ($_REQUEST['boards'] as $i => $b) {
            $_REQUEST['boards'][$i] = (int) $b;
        }
        $request = $smcFunc['db_query']('', '
			SELECT b.id_board, b.num_topics
			FROM {db_prefix}boards AS b
			WHERE b.id_board IN ({array_int:board_list})
				AND {query_see_board}
			LIMIT {int:limit}', array('board_list' => $_REQUEST['boards'], 'limit' => count($_REQUEST['boards'])));
        $total_posts = 0;
        $boards = array();
        $say = 5;
        while ($row = $smcFunc['db_fetch_assoc']($request)) {
            $boards[] = $row['id_board'];
            $total_posts += $row['num_posts'];
        }
        $smcFunc['db_free_result']($request);
        if (empty($boards)) {
            fatal_lang_error('error_no_boards_selected');
        }
        $query_this_board = 'b.id_board IN ({array_int:boards})';
        $query_parameters['boards'] = $boards;
        // If these boards have a significant number of posts in them...
        if ($total_posts > 100 && $total_posts > $modSettings['totalMessages'] / 12) {
            $query_this_board .= '
					AND m.id_msg >= {int:max_id_msg}';
            $query_parameters['max_id_msg'] = max(0, $modSettings['maxMsgID'] - 500 - $_REQUEST['start'] * 9);
        }
        $context['page_index'] = constructPageIndex($scripturl . '?boards=' . implode(',', $_REQUEST['boards']), $_REQUEST['start'], min(100, $total_posts), 5, false);
    } elseif (!empty($board)) {
        $request = $smcFunc['db_query']('', '
			SELECT num_topics
			FROM {db_prefix}boards
			WHERE id_board = {int:current_board}
			LIMIT 1', array('current_board' => $board));
        list($total_posts) = $smcFunc['db_fetch_row']($request);
        $smcFunc['db_free_result']($request);
        $query_this_board = 'b.id_board = {int:board}';
        $query_parameters['board'] = $board;
        // If this board has a significant number of posts in it...
        if ($total_posts > 80 && $total_posts > $modSettings['totalMessages'] / 5) {
            $query_this_board .= '
					AND m.id_msg >= {int:max_id_msg}';
            $query_parameters['max_id_msg'] = max(0, $modSettings['maxMsgID'] - 600 - $_REQUEST['start'] * 5);
        }
        $context['page_index'] = constructPageIndex($scripturl . '?board=' . $board . '.%1$d', $_REQUEST['start'], min(100, $total_posts), 5, true);
    } else {
        $query_this_board = '{query_wanna_see_board}' . (!empty($modSettings['recycle_enable']) && $modSettings['recycle_board'] > 0 ? '
					AND b.id_board != {int:recycle_board}' : '') . '
					AND m.id_msg >= {int:max_id_msg}';
        $query_parameters['max_id_msg'] = max(0, $modSettings['maxMsgID'] - 100 - $_REQUEST['start'] * 6);
        $query_parameters['recycle_board'] = $modSettings['recycle_board'];
        $settings['adet'] = !empty($settings['adet']) ? (int) $settings['adet'] : 10;
        // !!! This isn't accurate because we ignore the recycle bin.
        $context['page_index'] = constructPageIndex($scripturl . '?', $_REQUEST['start'], min(100, $modSettings['totalTopics']), $settings['adet'], false);
    }
    $context['linktree'][] = array('url' => $scripturl . '?action=recent' . (empty($board) ? empty($_REQUEST['c']) ? '' : ';c=' . (int) $_REQUEST['c'] : ';board=' . $board . '.0'));
    $key = 'recent-' . $user_info['id'] . '-' . md5(serialize(array_diff_key($query_parameters, array('max_id_msg' => 0)))) . '-' . (int) $_REQUEST['start'];
    if (empty($modSettings['cache_enable']) || ($messages = cache_get_data($key, 120)) == null) {
        $done = false;
        while (!$done) {
            // Find the 10 most recent messages they can *view*.
            // !!!SLOW This query is really slow still, probably?
            $request = $smcFunc['db_query']('', '
				SELECT m.id_msg
				FROM {db_prefix}messages AS m
					INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
					INNER JOIN {db_prefix}topics AS t ON (t.' . (!empty($modSettings['RecentTopicsOnRecentPostsPage_mode']) && $modSettings['RecentTopicsOnRecentPostsPage_mode'] == 'updated' ? 'id_last_msg' : 'id_first_msg') . ' = m.id_msg)
				WHERE ' . $query_this_board . '
					AND m.approved = {int:is_approved}
				ORDER BY m.id_msg DESC
				LIMIT {int:offset}, {int:limit}', array_merge($query_parameters, array('is_approved' => 1, 'offset' => $_REQUEST['start'], 'limit' => 5)));
            // If we don't have 10 results, try again with an unoptimized version covering all rows, and cache the result.
            if (isset($query_parameters['max_id_msg']) && $smcFunc['db_num_rows']($request) < 5) {
                $smcFunc['db_free_result']($request);
                $query_this_board = str_replace('AND m.id_msg >= {int:max_id_msg}', '', $query_this_board);
                $cache_results = true;
                unset($query_parameters['max_id_msg']);
            } else {
                $done = true;
            }
        }
        $messages = array();
        while ($row = $smcFunc['db_fetch_assoc']($request)) {
            $messages[] = $row['id_msg'];
        }
        $smcFunc['db_free_result']($request);
        if (!empty($cache_results)) {
            cache_put_data($key, $messages, 120);
        }
    }
    // Nothing here... Or at least, nothing you can see...
    if (empty($messages)) {
        $context['posts'] = array();
        return;
    }
    // Get all the most recent posts.
    $request = $smcFunc['db_query']('', '
		SELECT
			m.id_msg, m.subject, m.smileys_enabled, m.poster_time, m.body, m.id_topic, t.id_board, b.id_cat,
			b.name AS bname, c.name AS cname, t.num_replies, m.id_member, m2.id_member AS id_first_member,
			IFNULL(mem2.real_name, m2.poster_name) AS first_poster_name, t.id_first_msg,
			IFNULL(mem.real_name, m.poster_name) AS poster_name, t.id_last_msg
		FROM {db_prefix}messages AS m
			INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
			INNER JOIN {db_prefix}boards AS b ON (b.id_board = t.id_board)
			INNER JOIN {db_prefix}categories AS c ON (c.id_cat = b.id_cat)
			INNER JOIN {db_prefix}messages AS m2 ON (m2.id_msg = t.id_first_msg)
			LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
			LEFT JOIN {db_prefix}members AS mem2 ON (mem2.id_member = m2.id_member)
		WHERE m.id_msg IN ({array_int:message_list})
		ORDER BY m.id_msg DESC
		LIMIT ' . count($messages), array('message_list' => $messages));
    $counter = $_REQUEST['start'] + 1;
    $context['posts'] = array();
    $board_ids = array('own' => array(), 'any' => array());
    while ($row = $smcFunc['db_fetch_assoc']($request)) {
        // If we want to limit the length of the post.
        if (!empty($length) && $smcFunc['strlen']($row['body']) > $length) {
            $row['body'] = $smcFunc['substr']($row['body'], 0, $length);
            $cutoff = false;
            $last_space = strrpos($row['body'], ' ');
            $last_open = strrpos($row['body'], '<');
            $last_close = strrpos($row['body'], '>');
            if (empty($last_space) || $last_space == $last_open + 3 && (empty($last_close) || !empty($last_close) && $last_close < $last_open) || $last_space < $last_open || $last_open == $length - 6) {
                $cutoff = $last_open;
            } elseif (empty($last_close) || $last_close < $last_open) {
                $cutoff = $last_space;
            }
            if ($cutoff !== false) {
                $row['body'] = $smcFunc['substr']($row['body'], 0, $cutoff);
            }
            $row['body'] .= '...';
        }
        $row['body'] = parse_bbc($row['body'], $row['smileys_enabled'], $row['id_msg']);
        if (!empty($recycle_board) && $row['id_board'] == $recycle_board) {
            $row['icon'] = 'recycled';
        }
        // Check that this message icon is there...
        if (!empty($modSettings['messageIconChecks_enable']) && !isset($icon_sources[$row['icon']])) {
            $icon_sources[$row['icon']] = file_exists($settings['theme_dir'] . '/images/post/' . $row['icon'] . '.png') ? 'images_url' : 'default_images_url';
        }
        // Censor everything.
        censorText($row['body']);
        censorText($row['subject']);
        // BBC-atize the message.
        $row['body'] = parse_bbc($row['body'], $row['smileys_enabled'], $row['id_msg']);
        $secimyap = preg_match_all('/<img.+src=[\'"]([^\'"]+)[\'"].*>/i', $row['body'], $sonuc);
        // src="" içindekini al.
        if (!empty($sonuc[0]) && !empty($sonuc[1])) {
            $ilkresim = $sonuc[1][0];
        } else {
            // Resim bulunmazsa default resim ekle
            $ilkresim = $settings['theme_url'] . '/images/konusaldefault.png';
        }
        // And build the array.
        $context['posts'][$row['id_msg']] = array('id' => $row['id_msg'], 'counter' => $counter++, 'alternate' => $counter % 2, 'category' => array('id' => $row['id_cat'], 'name' => $row['cname'], 'href' => $scripturl . '#c' . $row['id_cat'], 'link' => '<a href="' . $scripturl . '#c' . $row['id_cat'] . '">' . $row['cname'] . '</a>'), 'board' => array('id' => $row['id_board'], 'name' => $row['bname'], 'href' => $scripturl . '?board=' . $row['id_board'] . '.0', 'link' => '<a href="' . $scripturl . '?board=' . $row['id_board'] . '.0">' . $row['bname'] . '</a>'), 'topic' => $row['id_topic'], 'href' => $scripturl . '?topic=' . $row['id_topic'] . '.msg' . $row['id_msg'] . '#msg' . $row['id_msg'], 'link' => '<a href="' . $scripturl . '?topic=' . $row['id_topic'] . '.msg' . $row['id_msg'] . '#msg' . $row['id_msg'] . '" rel="nofollow">' . $row['subject'] . '</a>', 'start' => $row['num_replies'], 'subject' => $row['subject'], 'resim' => $ilkresim, 'time' => timeformat($row['poster_time']), 'timestamp' => forum_time(true, $row['poster_time']), 'first_poster' => array('id' => $row['id_first_member'], 'name' => $row['first_poster_name'], 'href' => empty($row['id_first_member']) ? '' : $scripturl . '?action=profile;u=' . $row['id_first_member'], 'link' => empty($row['id_first_member']) ? $row['first_poster_name'] : '<a href="' . $scripturl . '?action=profile;u=' . $row['id_first_member'] . '">' . $row['first_poster_name'] . '</a>'), 'poster' => array('id' => $row['id_member'], 'name' => $row['poster_name'], 'href' => empty($row['id_member']) ? '' : $scripturl . '?action=profile;u=' . $row['id_member'], 'link' => empty($row['id_member']) ? $row['poster_name'] : '<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $row['poster_name'] . '</a>'), 'message' => $row['body'], 'can_reply' => false, 'can_mark_notify' => false, 'can_delete' => false, 'delete_possible' => ($row['id_first_msg'] != $row['id_msg'] || $row['id_last_msg'] == $row['id_msg']) && (empty($modSettings['edit_disable_time']) || $row['poster_time'] + $modSettings['edit_disable_time'] * 60 >= time()));
        if ($user_info['id'] == $row['id_first_member']) {
            $board_ids['own'][$row['id_board']][] = $row['id_msg'];
        }
        $board_ids['any'][$row['id_board']][] = $row['id_msg'];
    }
    $smcFunc['db_free_result']($request);
    // There might be - and are - different permissions between any and own.
    $permissions = array('own' => array('post_reply_own' => 'can_reply', 'delete_own' => 'can_delete'), 'any' => array('post_reply_any' => 'can_reply', 'mark_any_notify' => 'can_mark_notify', 'delete_any' => 'can_delete'));
    // Now go through all the permissions, looking for boards they can do it on.
    foreach ($permissions as $type => $list) {
        foreach ($list as $permission => $allowed) {
            // They can do it on these boards...
            $boards = boardsAllowedTo($permission);
            // If 0 is the only thing in the array, they can do it everywhere!
            if (!empty($boards) && $boards[0] == 0) {
                $boards = array_keys($board_ids[$type]);
            }
            // Go through the boards, and look for posts they can do this on.
            foreach ($boards as $board_id) {
                // Hmm, they have permission, but there are no topics from that board on this page.
                if (!isset($board_ids[$type][$board_id])) {
                    continue;
                }
                // Okay, looks like they can do it for these posts.
                foreach ($board_ids[$type][$board_id] as $counter) {
                    if ($type == 'any' || $context['posts'][$counter]['poster']['id'] == $user_info['id']) {
                        $context['posts'][$counter][$allowed] = true;
                    }
                }
            }
        }
    }
    $quote_enabled = empty($modSettings['disabledBBC']) || !in_array('quote', explode(',', $modSettings['disabledBBC']));
    foreach ($context['posts'] as $counter => $dummy) {
        // Some posts - the first posts - can't just be deleted.
        $context['posts'][$counter]['can_delete'] &= $context['posts'][$counter]['delete_possible'];
        // And some cannot be quoted...
        $context['posts'][$counter]['can_quote'] = $context['posts'][$counter]['can_reply'] && $quote_enabled;
    }
    global $context, $settings, $options, $txt, $scripturl;
    echo '<script type="text/javascript" src="', $settings['theme_url'], '/scripts/modernizr.custom.28468.js"></script>
		<div id="da-slider" class="da-slider">';
    foreach ($context['posts'] as $post) {
        echo '
				<div class="da-slide">
				<h2><a href="', $post['href'], '">', $post['subject'], '</a></h2>
				<p>', temizle($post['message']), ' </p>
				<a href="', $post['href'], '" class="da-link">', $txt['Read'], '</a>
				<div class="da-img"><a href="', $post['href'], '"> <img width="120px" src="', $post['resim'], '" alt="', $post['subject'], '" class="haber_resmi" /></a></div>
				</div>';
    }
    echo '
			</div>
		<script type="text/javascript" src="', $settings['theme_url'], '/scripts/jquery.cslider.js"></script>
		<script type="text/javascript">
			$(function() {
			
				$(\'#da-slider\').cslider({
					autoplay	: true,
					bgincrement	: 450
				});
			
			});
		</script>';
}
Пример #12
0
function temaBilgisi()
{
    $result = numToTheme(0);
    //ilk tema
    $cerezden = temizle(isset($_COOKIE["theme"]) ? $_COOKIE["theme"] : "");
    if ($cerezden != "" and is_dir('theme/' . $cerezden)) {
        $result = $cerezden;
    }
    if (empty($cerezden)) {
        setcookie("theme", $result, time() + 60 * 60 * 24 * 30);
    }
    return $result;
}
Пример #13
0
 </span></span></a></li>
          <li><a href="dataFriendActions.php"><span><span> <?php 
            echo $metin[594] . $bilgi10;
            ?>
 </span></span></a></li>
        </ul>
      </li>
    </ul>
  </li>
  <?php 
        }
        ?>
  <li><a href="index.php?logout=1"><span><span><img src="img/logout.png" border="0" style="vertical-align: middle;" alt="logout"/>
    <?php 
        if (!empty($adi)) {
            echo temizle($adi) . " ";
        }
        ?>
    <?php 
        echo $metin[59];
        ?>
 </span></span></a>
    <?php 
        if ($remUser) {
            ?>
    <ul>
      <li> <a href="index.php?forgetMe=1"><span><span><?php 
            echo $metin[196];
            ?>
</span></span></a> </li>
    </ul>
Пример #14
0
        break;
    case '1':
        $ktut = $metin[87];
        break;
    case '2':
        $ktut = $metin[88];
        break;
    default:
        $ktut = $metin[89];
}
?>
                  <p> <?php 
echo $metin[7];
?>
, <?php 
echo temizle($_SESSION["userr"]) . " " . $ktut;
?>
 </p>
                  <?php 
if ($_SESSION["tur"] == '1' || $_SESSION["tur"] == '2') {
    $pasifYorumlar = getpasifYorumlar();
    if ($pasifYorumlar > 0) {
        echo $metin[294] . " : <a href=dataCommentList2.php>" . $pasifYorumlar . " <img src='img/uyari.gif' border='0' style=\"vertical-align: middle;\" alt=\"imp\" /></a>";
        echo "<br/>";
    }
}
if (trim(getStats(11)) != "") {
    echo "<br/><div class='ikiKolon'>";
    echo "<strong>" . $metin[213] . "</strong><br/>" . getStats(11) . "</div>";
    if (trim(getStats(12)) != "") {
        echo "<div class='ikiKolon'><strong>" . $metin[239] . "</strong><br/>" . getStats(12) . "</div>";
Пример #15
0
function istekListesi()
{
    global $yol1;
    $lmt = 30;
    //son 30 günlük yeter
    $user = temizle(substr(isset($_SESSION["usern"]) ? $_SESSION["usern"] : "", 0, 15));
    $sql = "SELECT dateTime,DATE_FORMAT(dateTime, '%d-%m-%Y') as dt FROM eo_usertrack WHERE (unix_timestamp(now()) - unix_timestamp(dateTime) )/3600/24 <= {$lmt} and userName='******' and otherInfo like 'request%' order by dateTime DESC";
    $result = mysql_query($sql, $yol1);
    $data = "";
    while ($row = mysql_fetch_assoc($result)) {
        $data .= $row['dt'] . ", ";
    }
    $data = substr($data, 0, strlen($data) - 2);
    //son , silindi
    return $data;
}
Пример #16
0
    }
}
if (isset($_POST["MM_update"]) && $_POST["MM_update"] == "form3") {
    if (GetSQLValueString($_POST['realName'], "text") == 'NULL' || GetSQLValueString($_POST['userEmail'], "text") == 'NULL' || GetSQLValueString($_POST['userBirthDate'], "text") == 'NULL') {
        echo "<font id='hata'>&Uuml;ye bilgilerinizde eksik alanlar vardýr.</font>";
    } else {
        if (!isset($_POST['prldeg'])) {
            $_POST['prldeg'] = "";
        }
        if ($_POST['prldeg'] != "secili" && (GetSQLValueString($_POST['userPassword'], "text") == 'NULL' || GetSQLValueString($_POST['userPassword2'], "text") == 'NULL' || $_POST["userPassword"] != $_POST["userPassword2"] || strlen($_POST["userPassword"]) < 5 || $adi == $_POST["userPassword"] || substr_count($_POST["userPassword"], substr($_POST["userPassword"], 0, 1)) == strlen($_POST["userPassword"]) || $_POST["userPassword"] == "12345678")) {
            echo "<font id='hata'>Yeni parolanýzý yazmadýnýz, tekrarý boþ ge&ccedil;tiniz, parola ile kullanýcý adý ayný, tekrarlý deðer girdiniz, 12345678 girdiniz veya çok kýsa bir parola girdiniz!</font>";
        } else {
            if ($_POST['prldeg'] == "secili") {
                $updateSQL = sprintf("UPDATE eo_users SET realName=%s, userEmail=%s, userBirthDate='%s' WHERE id=%s", temizle(RemoveXSS(GetSQLValueString($_POST['realName'], "text"))), temizle(RemoveXSS(GetSQLValueString($_POST['userEmail'], "text"))), tarihYap($_POST['userBirthDate']), temizle(RemoveXSS(GetSQLValueString($_POST['id'], "int"))));
            } else {
                $updateSQL = sprintf("UPDATE eo_users SET userPassword=sha1(%s), realName=%s, userEmail=%s, userBirthDate='%s' WHERE id=%s", temizle(RemoveXSS(GetSQLValueString($_POST['userPassword'], "text"))), temizle(RemoveXSS(GetSQLValueString($_POST['realName'], "text"))), temizle(RemoveXSS(GetSQLValueString($_POST['userEmail'], "text"))), tarihYap($_POST['userBirthDate']), temizle(RemoveXSS(GetSQLValueString($_POST['id'], "int"))));
            }
            mysql_select_db($_db, $yol);
            $Result1 = mysql_query($updateSQL, $yol);
            if ($Result1) {
                echo "<font id='tamam'> {$metin['536']}</font>";
                trackUser($currentFile, "success,UserInf", $adi);
                if ($_POST['prldeg'] != "secili") {
                    trackUser($currentFile, "success,PasswdC", $adi);
                    die("<font id='hata'> Parolanýzý deðiþtirdiðiniz i&ccedil;in tekrar oturum a&ccedil;manýz gerekmektedir!</font>");
                }
            } else {
                trackUser($currentFile, "fail,UserInf", $adi);
                echo "<font id='hata'> &Uuml;ye bilgilerinizde hata olduðunda g&uuml;ncelleme iþleminiz tamamlanamadý! &Ouml;rneðin kullanýlan bir eposta adresi girdiniz.</font>";
            }
        }
Пример #17
0
function temizleCubuk($gelen)
{
    $gelen = str_replace("|", "¦", temizle($gelen));
    return $gelen;
}
Пример #18
0
 </span></span></a> </div>
                    </div>
                  </div>
          <?php 
} else {
    ?>
          <form id="formLogin" method="post" action="login.php">
            <label for="userN"> <?php 
    echo $metin[0];
    ?>
 : </label>
            <input type="hidden" name="form" value="login" />
            <div>
              <input name="userN" type="text" id="userN" size="18" maxlength="15" class="required"  style="width:150px" 
                     value="<?php 
    echo $remUser ? temizle($_COOKIE["remUser"]) : "";
    ?>
" />
            </div>
            <label for="userP"> <?php 
    echo $metin[1];
    ?>
 : </label>
            <div>
              <input name="userP" type="password" id="userP" size="18" maxlength="15" class="required"  style="width:150px" />
            </div>
            <br />
            <input type="submit" name="sumb" id="sumb" value="<?php 
    echo $metin[2];
    ?>
"  />
Пример #19
0
function anaMetniOku($gelen, $sayfaNo)
{
    global $yol1;
    global $metin;
    if (empty($gelen)) {
        return "<font id='uyari'>{$metin['176']}</font>|-|-|-|-|-|-|-|-|-|-|-|-|-|-";
    }
    if (empty($sayfaNo)) {
        return "<font id='uyari'>{$metin['176']}</font>|-|-|-|-|-|-|-|-|-|-|-|-|-|-";
    }
    $sql1 = "select \r\n\t            eo_5sayfa.id,eo_5sayfa.anaMetin as ana,eo_5sayfa.cevap as cevap,\r\n\t\t\t\teo_5sayfa.eklenmeTarihi as tarih,\t\t\t\t\r\n\t\t\t\teo_5sayfa.slideGecisSuresi as sgSuresi,\r\n\t\t\t\teo_5sayfa.cevapSuresi as cSuresi,\r\n\t\t\t\teo_users.userName as user, \r\n\t\t\t\teo_4konu.konuAdi as konuAdi,eo_4konu.konuyuKilitle as konuyuKilitle,\t\t\r\n\t\t\t\teo_4konu.oncekiKonuID as oncekiKonuID, eo_4konu.calismaHakSayisi as calismaHakSayisi,\t\r\n\t\t\t\teo_4konu.calismaSuresiDakika as calismaSuresiDakika,\r\n\t\t\t\teo_4konu.sinifaDahilKullaniciGorebilir as sinifaDahilKullaniciGorebilir,\r\n\t\t\t\teo_4konu.bitisTarihi as bitisTarihi, eo_4konu.sadeceKayitlilarGorebilir as skg, \r\n\t\t\t\teo_4konu.id as aktifKonuNo\r\n\t\t\t\tfrom eo_5sayfa, eo_users, eo_4konu \r\n\t\t\t\twhere eo_5sayfa.konuID='{$gelen}' and \r\n\t\t\t\t(eo_users.id=eo_5sayfa.ekleyenID) and (eo_4konu.id=eo_5sayfa.konuID) \r\n\t\t\t\torder by eo_5sayfa.sayfaSirasi";
    $result1 = mysql_query($sql1, $yol1);
    if ($result1) {
        mysql_fetch_row($result1);
        $kayitSayisi = @mysql_numrows($result1);
        if ($sayfaNo < 0) {
            $sayfaNo = 0;
        } else {
            if ($sayfaNo > $kayitSayisi) {
                $sayfaNo = $kayitSayisi - 1;
            } else {
                $sayfaNo = $sayfaNo - 1;
            }
        }
        //0 index kayit baslangicidir
        $humanRelativeDate = new HumanRelativeDate();
        $insansi = $humanRelativeDate->getTextForSQLDate(@mysql_result($result1, $sayfaNo, "tarih"));
        $tarih = $insansi;
        $user = @mysql_result($result1, $sayfaNo, "user");
        $cevap = @mysql_result($result1, $sayfaNo, "cevap");
        $konuAdi = @mysql_result($result1, $sayfaNo, "konuAdi");
        $konuyuKilitle = @mysql_result($result1, $sayfaNo, "konuyuKilitle");
        $bitisTarihi = @mysql_result($result1, $sayfaNo, "bitisTarihi");
        $sKayitlilarG = @mysql_result($result1, $sayfaNo, "skg");
        $aktifKonuNo = @mysql_result($result1, $sayfaNo, "aktifKonuNo");
        $oncekiKonuID = @mysql_result($result1, $sayfaNo, "oncekiKonuID");
        $calismaHakS = @mysql_result($result1, $sayfaNo, "calismaHakSayisi");
        $sgSuresi = temizle(@mysql_result($result1, $sayfaNo, "sgSuresi"));
        $cSuresi = temizle(@mysql_result($result1, $sayfaNo, "cSuresi"));
        $calismaSuresiD = $sKayitlilarG ? @mysql_result($result1, $sayfaNo, "calismaSuresiDakika") : "0";
        $sinifOgreK = $sKayitlilarG ? @mysql_result($result1, $sayfaNo, "sinifaDahilKullaniciGorebilir") : "0";
        $oncekiKonuAdi = getOncekiKonuAdi($oncekiKonuID);
        $sonrakiKonuID = getSonrakiKonu($gelen, "id");
        $sonrakiKonuAdi = getSonrakiKonu($gelen, "konuAdi");
        if ($bitisTarihi != "0000-00-00") {
            $gunFarki = getDayCount(date("Y-n-j"), $bitisTarihi);
        } else {
            $gunFarki = 1;
        }
        $adi = temizle(substr(isset($_SESSION["usern"]) ? $_SESSION["usern"] : "", 0, 15));
        $par = temizle(isset($_SESSION["userp"]) ? $_SESSION["userp"] : "");
        $tur = checkRealUser($adi, $par);
        if ($kayitSayisi > 0) {
            if ($sKayitlilarG == "1" && !in_array($tur, array("1", "2", "0"))) {
                //login olmamýþ
                return "<font id='hata'>'{$konuAdi}' " . $metin[181] . "<br/><a href='newUser.php'><img src='img/user_manager.gif' border=\"0\" style=\"vertical-align: middle;\" alt='" . $metin[149] . "' title='" . $metin[149] . "' />{$metin['3']}!</a>&nbsp;&nbsp;<a href='index.php'><img src=\"img/home.png\" border=\"0\" style=\"vertical-align: middle;\" alt=\"main\"/> {$metin['2']}</a></font>|-|-|-|-|-|-|-|-|-|-|-|-|-|-";
            }
            if ($sKayitlilarG == "1" && in_array($tur, array("1", "2", "0"))) {
                if (kullaniciHakSayisi($gelen, $adi, $par) >= $calismaHakS && $calismaHakS > 0) {
                    return "<font id='hata'>'{$konuAdi}', " . $metin[208] . "</font>|-|-|-|-|-|-|-|-|-|-|-|-|-|-";
                }
            }
            if ($sKayitlilarG == "1" && $tur == "0") {
                if (ogrenciSinifaDahil($adi, $par, $gelen) == 0 && $sinifOgreK == 1) {
                    return "<font id='hata'>'{$konuAdi}', " . $metin[214] . "</font>|-|-|-|-|-|-|-|-|-|-|-|-|-|-";
                }
            }
            if ($konuyuKilitle == "1") {
                return "<font id='hata'><img src='img/lock.png' border=\"0\" style=\"vertical-align: middle;\" alt='" . $metin[179] . "' title='" . $metin[179] . "' /> '{$konuAdi}' " . $metin[179] . "</font>|-|-|-|-|-|-|-|-|-|-|-|-|-|-";
            }
            if ($gunFarki <= 0) {
                return "<font id='hata'>'{$konuAdi}' " . $metin[180] . "</font>|-|-|-|-|-|-|-|-|-|-|-|-|-|-";
            }
            $cevaplanmisMi = @array_key_exists(mysql_result($result1, $sayfaNo, "id"), $_SESSION["cevaplar"]);
            if (($cevap != "" || is_numeric($cevap)) && !$cevaplanmisMi) {
                $cevap = mysql_result($result1, $sayfaNo, "id");
            } else {
                $cevap = "-";
            }
            return html_entity_decode(@mysql_result($result1, $sayfaNo, "ana")) . "|" . $tarih . "|" . $user . "|" . $kayitSayisi . "|" . $sayfaNo . "|" . $konuAdi . "|" . $oncekiKonuID . "|" . $oncekiKonuAdi . "|" . $sonrakiKonuID . "|" . $sonrakiKonuAdi . "|" . $calismaSuresiD . "|" . $cevap . "|" . $aktifKonuNo . "|" . $cSuresi . "|" . $sgSuresi;
        } else {
            return "<font id='hata'><img src='img/empty.png' border=\"0\" style=\"vertical-align: middle;\" alt='" . $metin[209] . "' title='" . $metin[209] . "' />" . $metin[182] . "</font>|-|-|-|-|-|-|-|-|-|-|-|-|-|-";
        }
    } else {
        return "<font id='hata'>" . $metin[183] . "</font>|-|-|-|-|-|-|-|-|-|-|-|-|-|-";
    }
    return "<font id='hata'>" . $metin[184] . "</font>|-|-|-|-|-|-|-|-|-|-|-|-|-|-";
}
Пример #20
0
    <label for="theme"><?php 
    echo $metin[154];
    ?>
 : </label>
    <select name="theme" id="theme" onchange="document.themeSelect.submit();">
      <?php 
    $themeArray = glob('theme/*', GLOB_ONLYDIR);
    $i = 0;
    foreach ($themeArray as $thme) {
        ?>
      <option value="<?php 
        $temaGel = explode("/", $thme);
        echo $temaGel[1];
        ?>
" <?php 
        if (!(!empty($_COOKIE['theme']) && strcmp($temaGel[1], temizle($_COOKIE['theme'])))) {
            echo "selected=\"selected\"";
        }
        ?>
>
      <?php 
        echo $temaGel[1];
        ?>
      </option>
      <?php 
        $i++;
    }
    ?>
    </select>
    <?php 
}
Пример #21
0
function anaMetniOku($konuID)
{
    global $yol1;
    global $metin;
    $sonuc = "";
    if (empty($konuID)) {
        return "<font id='uyari'>{$metin['176']}</font>";
    }
    $sql1 = "select eo_5sayfa.id,eo_5sayfa.anaMetin as ana ,eo_5sayfa.cevap as cevap, eo_5sayfa.eklenmeTarihi as tarih,eo_users.userName as user, \r\n\t\t\t\t\teo_4konu.konuAdi as konuAdi,eo_4konu.konuyuKilitle as konuyuKilitle, \r\n\t\t\t\t\teo_4konu.oncekiKonuID as oncekiKonuID, eo_4konu.calismaHakSayisi as calismaHakSayisi, \r\n\t\t\t\t\teo_4konu.sinifaDahilKullaniciGorebilir as sinifaDahilKullaniciGorebilir, \r\n\t\t\t\t\teo_4konu.bitisTarihi as bitisTarihi, eo_4konu.sadeceKayitlilarGorebilir as skg  \r\n\t\t\t\t\tfrom eo_5sayfa, eo_users, eo_4konu where eo_5sayfa.konuID='{$konuID}' and  \r\n\t\t\t\t\t(eo_users.id=eo_5sayfa.ekleyenID) and (eo_4konu.id=eo_5sayfa.konuID) and (eo_5sayfa.cevap='')\r\n\t\t\t\t\torder by eo_5sayfa.sayfaSirasi";
    // cevap boþ ise SORU deðildir, öyleyse ekrana listelenebilir
    $result1 = mysql_query($sql1, $yol1);
    if ($result1) {
        $kayitSayisi = @mysql_numrows($result1);
        $sonuc = "";
        while ($row = mysql_fetch_array($result1, MYSQL_ASSOC)) {
            $tarih = tarihOku($row["tarih"]);
            $user = $row["user"];
            $konuAdi = $row["konuAdi"];
            $konuyuKilitle = $row["konuyuKilitle"];
            $bitisTarihi = $row["bitisTarihi"];
            $sKayitlilarG = $row["skg"];
            $calismaHakS = $row["calismaHakSayisi"];
            $sinifOgreK = $row["sinifaDahilKullaniciGorebilir"];
            $oncekiKonuID = $row["oncekiKonuID"];
            if ($bitisTarihi != "0000-00-00") {
                $gunFarki = getDayCount(date("Y-n-j"), $bitisTarihi);
            } else {
                $gunFarki = 1;
            }
            $adi = temizle(substr(isset($_SESSION["usern"]) ? $_SESSION["usern"] : "", 0, 15));
            $par = temizle(isset($_SESSION["userp"]) ? $_SESSION["userp"] : "");
            $tur = checkRealUser($adi, $par);
            if ($kayitSayisi > 0) {
                if ($sKayitlilarG == "1" && !in_array($tur, array("1", "2", "0"))) {
                    return "<font id='hata'>'{$konuAdi}' " . $metin[181] . "<br/><a href='newUser.php'>{$metin['3']}!</a></font><hr noshade='noshade'/>";
                }
                if ($sKayitlilarG == "1" && in_array($tur, array("1", "2", "0"))) {
                    if (kullaniciHakSayisi($konuID, $adi, $par) >= $calismaHakS && $calismaHakS > 0) {
                        return "<font id='hata'>'{$konuAdi}', " . $metin[208] . "</font><hr noshade='noshade'/>";
                    }
                }
                if ($sKayitlilarG == "1" && $tur == "0") {
                    if (ogrenciSinifaDahil($adi, $par, $konuID) == 0 && $sinifOgreK == 1) {
                        return "<font id='hata'>'{$konuAdi}', " . $metin[214] . "</font>";
                    }
                }
                if ($konuyuKilitle == "1") {
                    return "<font id='hata'>'{$konuAdi}' " . $metin[179] . "</font><hr noshade='noshade'/>";
                }
                if ($gunFarki <= 0) {
                    return "<font id='hata'>'{$konuAdi}' " . $metin[180] . "</font><hr noshade='noshade'/>";
                }
                $sonuc .= "<font size='-1' style='font-style:italic;'>{$user} {$konuAdi} {$tarih}</font><br/>";
                $sonuc .= html_entity_decode($row["ana"]) . "<hr noshade='noshade'/>";
            } else {
                return "<font id='hata'>" . $metin[182] . "</font><hr noshade='noshade'/>";
            }
        }
        //while
        return $sonuc;
    } else {
        return "<font id='hata'>" . $metin[183] . "</font>";
    }
    return "<font id='hata'>" . $metin[184] . "</font>";
}
Пример #22
0
*/
function cevapOy(deger, gonderen, cevapID){ 
    httpObject3 = getHTTPObject();
    if (httpObject3 != null) {
        httpObject3.open("POST", "oyCevap.php", true);
		httpObject3.setRequestHeader('Content-Type','application/x-www-form-urlencoded; charset=iso-8859-9');
  		httpObject3.send('deger='+encodeURIComponent(deger) + '&gonderen=' + encodeURIComponent(gonderen) + '&cevapID=' + encodeURIComponent(cevapID) );	
		httpObject3.onreadystatechange = setOutputOda3;	
    }
}
</script>
</head>
<body>
<?php 
$adi = temizle(substr(isset($_SESSION["usern"]) ? $_SESSION["usern"] : "", 0, 15));
$par = temizle(isset($_SESSION["userp"]) ? $_SESSION["userp"] : "");
$tur = checkRealUser($adi, $par);
$gecerliKullID = getUserID2($adi);
if ($tur == "2" or $tur == "1" or $tur == "0") {
    //öðrenci, öðretmen ve yönetici girebilir
    $gelenID = (int) RemoveXSS($_GET["oku"]);
    if (!($gelenID > 0)) {
        die("?");
    }
    $srg = "select * from eo_askquestion where id={$gelenID} limit 0,1";
    $sorgu = mysql_query($srg);
    $soru_bilgileri = mysql_fetch_array($sorgu);
    if ($soru_bilgileri["question"] != "") {
        ?>
<div id="kapsayici">
  <div id="soruMetni">
Пример #23
0
Developer Site: http://yunus.sourceforge.net
Demo Site:		http://yunus.sourceforge.net/eogr
Source Track:	http://eogr.googlecode.com 
Support:		http://www.ohloh.net/p/eogr

This project is free software; you can redistribute it and/or
modify it under the terms of the GNU Lesser General Public
License as published by the Free Software Foundation; either
version 3 of the License, or any later version. See the GNU
Lesser General Public License for more details.
*/
ob_start();
// Buffer output
session_start();
$_SESSION['ready'] = TRUE;
require "conf.php";
if (!check_source()) {
    die("<font id='hata'>{$metin['295']}</font>");
}
parse_str($_POST['data']);
$konusu = temizle($_SESSION['konuID']);
$action = $_POST['action'];
$updateRecordsArray = $_POST['recordsArray'];
if ($action == "updateRecordsListings") {
    $listingCounter = 1;
    foreach ($updateRecordsArray as $recordIDValue) {
        $query = "update eo_5sayfa set sayfaSirasi='" . $listingCounter . "' where id='" . $recordIDValue . "' and konuID='" . $konusu . "'";
        mysql_query($query) or die('Error, insert query failed');
        $listingCounter = $listingCounter + 1;
    }
}
Пример #24
0
                    <?php 
    echo "<strong><a href='profil.php?kim=" . $uID . "' rel='facebox'><span style='text-transform: capitalize;'>" . strtolower(kullGercekAdi($uID)) . "</span></a></strong><br/>";
    echo getStats(12, $uID);
    ?>
                  </div>
                </div>
                <div class="cleared"></div>
              </div>
            </div>
          </div>
          <?php 
}
?>
          <?php 
$dersID = temizle(isset($_GET["kurs"]) ? $_GET["kurs"] : "");
$uID = temizle(isset($_GET["user"]) ? $_GET["user"] : "");
if (!empty($dersID)) {
    ?>
          <div class="Post">
            <div class="Post-tl"></div>
            <div class="Post-tr">
              <div>&nbsp;</div>
            </div>
            <div class="Post-bl">
              <div>&nbsp;</div>
            </div>
            <div class="Post-br">
              <div>&nbsp;</div>
            </div>
            <div class="Post-tc">
              <div>&nbsp;</div>
Пример #25
0
 }
 if (empty($_GET["yonU"])) {
     $_GET["yonU"] = "";
 }
 if (empty($_SESSION["siraYonu2"])) {
     $siraYonu = "desc";
     $_SESSION["siraYonu2"] = $siraYonu;
 } else {
     if (!empty($_GET['siraYap']) and $_GET["yonU"] != "dur" && $_GET['siraYap'] == "OK") {
         $siraYonu = $_SESSION["siraYonu2"] == "desc" ? "asc" : "desc";
         $_SESSION["siraYonu2"] = $siraYonu;
     } else {
         $siraYonu = $_SESSION["siraYonu2"];
     }
 }
 $sirAlan = temizle(isset($_GET['order']) ? $_GET['order'] : "");
 if ($sirAlan != "") {
     $query_eoUsers = "SELECT eo_comments.id as id, eo_comments.konuID as konuID, eo_users.id as userID, eo_comments.active, eo_comments.comment, eo_comments.commentDate,eo_users.userName as userName, eo_4konu.konuAdi as konuAdi FROM eo_comments {$filtr2} ORDER BY {$sirAlan} {$siraYonu}";
 } else {
     $query_eoUsers = "SELECT eo_comments.id as id, eo_comments.konuID as konuID, eo_users.id as userID, eo_comments.active,eo_comments.comment, eo_comments.commentDate, eo_users.userName as userName, eo_4konu.konuAdi as konuAdi FROM eo_comments {$filtr2} ORDER BY eo_comments.commentDate DESC";
     $sirAlan = "commentDate";
 }
 if (!empty($_GET["upd"]) and $_GET["upd"] == "1") {
     $query_limit_eoUsers = "SELECT eo_comments.id as id, eo_comments.comment FROM eo_comments where id='" . RemoveXSS($_GET["id"]) . "'";
 } else {
     $query_limit_eoUsers = sprintf("%s LIMIT %d, %d", $query_eoUsers, $startRow_eoUsers, $maxRows_eoUsers);
 }
 $eoUsers = mysql_query($query_limit_eoUsers, $yol);
 if (!$eoUsers) {
     echo mysql_error();
 }
Пример #26
0
<?php

session_start();
error_reporting(0);
if (!isset($_POST['urunID']) || empty($_POST['urunID']) || !isset($_POST['kat']) || empty($_POST['kat']) || !isset($_POST['toplam']) || empty($_POST['toplam'])) {
    exit;
} else {
    include '../../library/Elkatek_Connection.php';
    include '../../library/guvenlik.php';
    include '../../library/functions.php';
    $fonks = new yeniyol();
    function temizle($veri)
    {
        return trim(strip_tags(mysql_real_escape_string($veri)));
    }
    $say = mysql_num_rows(mysql_query("SELECT id FROM sepet WHERE sepet='" . temizle($sessionID) . "' AND urun='" . intval($_POST['urunID']) . "'"));
    if ($say > 0) {
        $guncelle = mysql_query("UPDATE sepet SET adet=adet+" . intval($_POST['toplam']) . "  WHERE sepet='" . temizle($sessionID) . "' AND urun='" . intval($_POST['urunID']) . "' LIMIT 1");
    } else {
        $kayit = mysql_query("INSERT INTO sepet VALUES(NULL,'" . date("Y-m-d") . "','" . temizle($sessionID) . "','" . intval($_POST['kat']) . "','" . intval($_POST['toplam']) . "','" . intval($_POST['urunID']) . "','')");
    }
    echo $fonks->sepet(temizle($sessionID));
    $baglan->kapat();
}
Пример #27
0
         $query_eoUsers = "SELECT * FROM eo_users {$filtr2} ORDER BY {$sirAlan} {$siraYonu}";
     } else {
         $sirAlan = "requestDate";
         $query_eoUsers = "SELECT * FROM eo_users {$filtr2} ORDER BY {$sirAlan} DESC";
     }
 }
 if (!empty($_GET["upd"]) and $_GET["upd"] == "1") {
     $query_limit_eoUsers = sprintf("%s", $query_eoUsers);
 } else {
     $query_limit_eoUsers = sprintf("%s LIMIT %d, %d", $query_eoUsers, $startRow_eoUsers, $maxRows_eoUsers);
 }
 $eoUsers = mysql_query($query_limit_eoUsers, $yol) or die(mysql_error());
 $row_eoUsers = mysql_fetch_assoc($eoUsers);
 $totalRows_eoUsers = mysql_num_rows($eoUsers);
 if (isset($_GET['totalRows_eoUsers'])) {
     $totalRows_eoUsers = temizle($_GET['totalRows_eoUsers']);
 } else {
     $all_eoUsers = mysql_query($query_eoUsers);
     $totalRows_eoUsers = mysql_num_rows($all_eoUsers);
 }
 $totalPages_eoUsers = ceil($totalRows_eoUsers / $maxRows_eoUsers) - 1;
 $queryString_eoUsers = "";
 if (!empty($_SERVER['QUERY_STRING'])) {
     $params = explode("&", $_SERVER['QUERY_STRING']);
     $newParams = array();
     foreach ($params as $param) {
         if (stristr($param, "pageNum_eoUsers") == false && stristr($param, "totalRows_eoUsers") == false && stristr($param, "siraYap") == false) {
             array_push($newParams, $param);
         }
     }
     if (count($newParams) != 0) {
Пример #28
0
                              <span class="hint"><?php 
        echo $metin[284];
        ?>
<br />
                              <span id="msg2"></span><span id="pr2" style="visibility:hidden;"><img src="img/loadingRect2.gif" border="0" style="vertical-align: middle;"  alt="loading" /></span><span class="hint-pointer">&nbsp;</span></span> </div>
                          </dd>
                          <dt>
                            <label for="birth"> <?php 
        echo $metin[42];
        ?>
 :</label>
                          </dt>
                          <dd>
                            <div>
                              <input name="birth" type="text" id="birth" size="35" maxlength="30"  style="width:150px" class="required dateDE" value="<?php 
        echo isset($_POST["birth"]) ? temizle($_POST["birth"]) : "31.12.1990";
        ?>
"/>
                              <span class="hint"><?php 
        echo $metin[285];
        ?>
<span class="hint-pointer">&nbsp;</span></span> </div>
                          </dd>
                          <dd>
                            <div>
                              <label><?php 
        echo $metin[43];
        ?>
                                <input type="checkbox" name="onay" id="onay" value="OK"  class="required" />
                              </label>
                            </div>
Пример #29
0
$address1 = getMailAddress($address1);
if (!email_valid($address1) && !empty($address1)) {
    echo "<font id='hata'>&Ouml;z&uuml;r dileriz, kullanýcýnýn eposta adresi bilgisinde sorun var!</font>";
    $hata = true;
}
if (isset($_POST["konu"])) {
    if ($_POST["ccode"] != $_SESSION["ccode"]) {
        echo "<font id='hata'> Kod boþ veya hatalý girildi!</font>";
        $hata = true;
        $_SESSION["ccode"] = "";
    } else {
        $_SESSION["ccode"] = "";
        $subject = temizle($_POST["konu"]);
        $address = temizle($_POST["address"]);
        $address = getMailAddress($address);
        $bodisi = temizle($_POST["icerik"]);
        $gonderenMail = getMailAddress(getUserID2($_SESSION["usern"]));
        if ($gonderenMail == "") {
            $gonderenMail = ayarGetir("ayar4char");
        }
        $headers = 'MIME-Version: 1.0' . "\r\n";
        $headers .= 'Content-type: text/html; charset=iso-8859-9' . "\r\n";
        $headers .= "From:" . $gonderenMail . "\r\nReply-To:" . $gonderenMail . "\r\n" . 'X-Mailer: PHP/' . phpversion();
        if (email_valid($address)) {
            if (@mail("{$address}", "eOgr - {$subject}", "{$bodisi}", $headers)) {
                echo "<font id='tamam'>Epostanýz G&ouml;nderildi!</font>";
                $hata = true;
            } else {
                echo "<font id='hata'>&Ouml;z&uuml;r dileriz, þu anda mesajýnýz g&ouml;nderilemiyor!</font>";
                $hata = true;
            }
Пример #30
0
        case 12:
            return "<h4>{$metin['427']}</h4>" . $metin[438];
            break;
        case 13:
            return "<h4>{$metin['428']}</h4>" . $metin[439];
            break;
        case 14:
            return "<h4>{$metin['429']}</h4>" . $metin[440];
            break;
        case 15:
            return "<h4>{$metin['430']}</h4>" . $metin[441];
            break;
        case 16:
            return "<h4>{$metin['431']}</h4>" . $metin[442];
            break;
        case "TUMU":
            $bilgiler = "{$metin['261']}|" . $metin[266] . "|1~";
            $bilgiler .= "{$metin['262']}|" . $metin[267] . "|2~";
            $bilgiler .= "{$metin['431']}|" . $metin[442] . "|3~";
            return $bilgiler;
            break;
    }
    return "";
}
if (isset($_GET['konu'])) {
    if (!empty($_GET['konu'])) {
        echo anaMetniOku(temizle($_GET['konu']));
    }
} else {
    echo "";
}